Security Engineer

We're looking for a Security Engineer to own information security across the organization. This is a hands-on, end-to-end role: you'll cover on-prem IT security, network security, AWS security, code security, and security monitoring. You'll identify gaps, prioritize them, and close them yourself. As the sole security owner, you'll have a real opportunity to shape the security architecture and strategy of the organization from the ground up.

Responsibilities

• Assess the current security posture across on-prem, cloud, network, and applications, identify gaps and risks, and build a prioritized remediation roadmap
• Define and drive the organization's security architecture, standards, and policies
• Secure and harden the on-prem environment: servers, endpoints, Active Directory, identity and access management, patching, and vulnerability management
• Design and maintain network security: firewalls, segmentation, VPN, and secure remote access
• Secure the AWS environment: IAM, security groups, encryption, logging, configuration baselines, and posture management
• Implement code security practices: SAST/DAST, dependency and secrets scanning, and secure CI/CD pipelines, working closely with developers
• Build and operate security monitoring: centralized logging, SIEM or equivalent, alerting, and detection
• Lead incident response: investigation, containment, and post-incident improvements
• Run vulnerability scans and penetration testing (internal or through external vendors), and track remediation to closure
• Support compliance and audit requirements and security awareness for employees
• Evaluate and implement security tools, and manage security vendors

Requirements

• 4+ years of experience in information security, security engineering, or a related technical role
• Hands-on experience securing on-prem environments (Windows/Linux, Active Directory, endpoint protection)
• Strong knowledge of network security: firewalls, VPN, segmentation, and common protocols
• Hands-on experience with AWS security (IAM, VPC, CloudTrail, GuardDuty, Security Hub, or similar)
• Experience with vulnerability management and remediation processes
• Experience with security monitoring and logging tools (SIEM, EDR, or similar)
• Understanding of secure development practices and experience with code security tools
• Experience with incident response and investigation
• Strong analytical and problem-solving skills, and the ability to work independently and prioritize across many domains
• Good communication skills in English and Hebrew, with the ability to explain risks to technical and non-technical stakeholders